The corresponding TCP/UDP ports are dynamic. To permit them, you use a set applications application-name term term-name uuid hex-number statement for each number. The ALG maps the program numbers into dynamically negotiated TCP/UDP ports based on these four UUIDs and permits or denies the service based on a policy you configure.